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DIRECTOR OF CENTRAL INTELLIGENCE 

Security Committee 


SECOM-D-142 


14 April 1982 






MEMORANDUM FOR: Members, DCI Security Committee 




FROM: 


•ST AT,,, 


Chairman 


SUBJECT: 


Personnel Security Subcommittee Charter 


Forwarded herewith is the newly written charter for the Personnel Security 


Subcommittee. It has been reviewed and unanimously approved by the members of 


the Personnel Security Subcommittee as their basic operating document. It is 


requested that members review this paper and if there are no objections to it, 
it will become this Subcommittee's basic paper. If no response is received 


by myself or the Executive Secretary byjfA^il n98^e will consider that 


you have approved the document. 
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DIRECTOR OF CENTRAL INTELLIGENCE 

Security Committee 



SEC0M-D-157 


23 April 1982 


MEMORANDUM FOR: Members, DCI Security Committee 
FROM: 

Chairman 

SUBJECT: SECOM Charter 

REFERENCE: My Memo to Members, SEC0M-D-104, dated 23 March 1982 


STAT 


As promised at the 21 April meeting, this addresses comments received on 
the draft revision of the SECOM charter forwarded by reference: 

a. One member noted that the substance of the draft may 
not merit classification. 

Comment: It is planned that the collection of revised DCIDs will be 
classified. Accordingly, our charter will be classified as part of the 
package. 


b. A suggestion was made that the second sentence of section 
four be changed to read "Senior Officials of the Intelligence Community" 
instead of "Intelligence Community principals." 

Comment: The Executive Secretary NFIB/NFIC chose the "Intelligence 
Community principals" terminology to permit continued representation on the 
SECOM and other DCI committees from organizations which do not come under "Senior 
Officials of the Intelligence Community" as that term is defined in Executive 
Order 12333. 


c. One member noted that security education and awareness is left 
to a working group and recommended that this group be upgraded to permanent 
subcommittee status. 

Comment: This does not bear on the wording of the draft charter, which 
authorizes the chairman to establish subcommittees, etc., as required. Under 
that authority, I accept the recommendation contingent upon SECOM member endorse- 
ment and approval of a tasking charter. 
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d It was suggested that the list of implementing guidelines 
be reformatted for the sake of clarity; be consolidated at some future 
date; and include "Minimum Standards for Security Awareness Programs 
in the Intelligence Community." 

Comment ; Suggestions accepted. 

e. A question was raised about the interpretation of section 2.b(2) 
on SECOM functions concerning investigations of unauthorized disclosures 
of classified intelligence. 


Comment: It is not intended that the SECOM charter contain authority to 
mandate what procedures shall be employed to investigate such disclosures. 

However, the DCI does have clear authority to protect intelligence and to 
obtain information on disclosures necessary to assess the impact on the intel- 
ligence process and to support development of corrective security measures. 

The Security Committee was originally formed to a ddr f?s leaks and compromises 
of intelligence. A significant part of the present (18 May 1976) SECOM charter 
addresses our role in unauthorized disclosures. Although overall Executive 
Branch procedures concerning unauthorized disclosures of classified information 
generally are dealt with in the findings and recommendations of the report the 
Attorney General sent the President on 31 March 1982, nothing is being considered 
now which would in any way reduce the DCI's authorities or responsibilities con- 
cerning disclosures of intelligence. Accordingly, I believe we should carry 
forward to the new draft the essential elements of our present tasking. If 
the White House directs stronger measures to prevent disclosures, we can change 
the SECOM charter as needed. In the interim we need to move promptly to agree 
on a final draft charter. If SECOM members find the language of section 2.b(2) 
of the present draft troublesome, the following adaptation of our present charter, 
to be a new section 2.c (in place of 2.b(2) and renumbering sections appropriately), 
may be hel pf ul : 


"c. On behalf of the DCI, request and coordinate investigations 
by Intelligence Community components of unauthorized disclosures or 
compromises of classified intelligence; and determine and recommend 
corrective security measures needed to reduce the future likelihood of 
such disclosures or compromises." 


May I have members' thoughts on this approach? 

f. Several members advised of an error in section 2.c in stating 
the term "Sensitive Compartmented Information." 

Comment: Correction made. 
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l 4 APR 1982 


MEMORANDUM FOR: Chairman, DCI Security Committee 
FROM: | 

CIA Member, DCI Security Committee 
SUBJECT: Draft SECOM Charter 

REFERENCE : Memorandum from Chaf riaan/DCI SECOM, dated 

23 March 1982, same subject ( SECOM- D- 104) 


Please be advised of the concurrence of the Central 
Intelligence Agency in the draft SECOM charter forwarded by 
reference. 


Distribution : 

Orig - Adse 
1 - D/Sec 
(£> - OS Reg 
1 - PPG Chrono 


OS/P&M/PEi 

Revised 


cbt (12 April 82) 
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SEC0M-D-104 
23 March 1982 


MEMORANDUM FOR: 
FROM: 

SUBJECT: 


Members, DCI Security Committee 


Chairman 
SEC0M Charter 


25X1 


1 As Dart of the ongoing effort to revise the Director of Central 
Tntelliaence Directives (DCIDs), Admiral Inman has approved an approach which 

policy new DCIDS and publishing ynd»C 

such as is found in many current DCIDs (e. g. .DCIDs 1/14, 1/16 ./ » 

Admiral Inman has approved this revision for circulation to SECOM membe . 

2 The draft revision is attached. Members are requested to coordinate 
it within their departments and agencies and to provide me their concurrence 
or comments by 16 April 1982. 


Attachment 
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8 April 1982 


MEMORANDUM FOR: Chief, Policy and Plans Group 
FROM: 

Chief of Operations (PTAS) 
SUBJECT: Revised SEC0M Charter 


25X1 


25X1 


1. Pursuant to your request for comments re Subject by 
9 April, attached is a review/comment from the Chief, Information 
Systems Security Group. Additionally, we would like to point out 
that we are certainly in agreement with the intention and goals 
of SEC0M, however, continue to feel that strong empha.sis must be 
provided to upgrade security standards and criteria in the 
Community. The job of security daily seems to become more difficult 
in a permissive society with all its "leaks" and watered-down 
philosophies and attitudes. A job of SECOM, as we see it, is 
to disallow even the thought that standards a nd crite ria are 
to be at the lowest common denominator level. 


2. A minor point is pointed out that on page 2, paragraph 
2(c), the expression "special compartmented information" is 
probably in error. If this statement refers to SCI, it sh ould 
be corrected to read "sensitive compartmented information . " 
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MEMORANDUM FOR: 

FROM : 

SUBJECT : 
REFERENCE : 


Chief of Operations 

Physical, Technical and Area Security 


Information Systems Security Group , OS 


Comments on Revised SECOM Charter 


Routing and Record Sheet dated 24 March 1982 
w/ attachment 


25X1 


1 . This office has reviewed referenced document. 


2. We have no problem with the approach as stated in reference 
which will separate broad policy from implementation guidance in the 
form of an Intelligence Community regulation provided that the 
effective date of the regulatory issuance conforms with the date of 
policy promulgation. If broad policy is published, for example, on 
the subject of computer security and there is a gap of time before 
the regulation to go with this policy is agreed to and published, 
agencies (and contractors) would be doing their "own thing" and 
chaos would ensue. There would be a breakdown in uniformity which 
we have been striving to achieve over these many years. Lack of 
such uniformity especially in the contractor world could and most 
probably would lead to increased dollar costs in processing 
community data (with different contractor requirements for ins tance 
and lack of Memoranda of Agreement(s) among member agencies). 


3. The bright side in this proposed charter is that technology 
changes which oftentimes generate new computer security 
vulnerabilities (e.g. , fixed storage devices, remote diagnostics, 
etc.) can be handled as revisions to the regulation(s) with the 
broad policy document kept intact without the necessity of 
constantly changing it. In short, the policy section would be 
somewhat fixed, with changes made when needed in the regulation 
instead of the whole document. Our concern is that there always be 
a regulation to go with stated broad policy. 
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